2001P04780US 



20 

What is claimed is: 

1. A system employed by a first application for supporting concurrent 
operation of a plurality of network compatible applications, comprising: 

an entitlement processor for authorizing user access to said first 
application in response to validation of user identification information; and 

a communication processor for communicating a session initiation 
request to a managing application to initiate generation of a session identifier 
particular to a user initiated session and for use by a plurality of concurrently 
operating applications to uniquely identify said user initiated session in response to 
validation of user identification information. 

2. A system according to claim 1, wherein 

said session initiation request to said managing application also 
initiates generation of an encryption key particular to said user initiated session for 
use by said first application. 

3. A system according to claim 2, wherein 

said encryption key is for common use by said plurality of 
concurrently operating applications in encrypting data associated with a personal 
record. 

4. A system according to claim 1, wherein 

said communication processor also communicates additional 
parameters to said managing application for storage, said additional parameters 
including one or more of, (a) an authentication service identifier, (b) a language 
identifier, (c) a userid, (d) a URL for use in acquiring a web page providing a logon 
menu to support user initiation of another session, (e) a URL to be contacted upon a 
predetermined event and (f) an identification of a type of said predetermined event. 

5. A system according to claim 1, including 

an input processor for receiving said session identifier and an 
associated encryption key from said managing application. 

6. A system according to claim 5, including 

an encryption processor for use in encrypting data associated with a 
personal record. 
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7. A system employed by a managing application for supporting 
concurrent operation of a plurality of network compatible applications, comprising: 

an input processor for receiving from a first application a session 
5 initiation request to initiate generation of a session identifier; 

a session identifier generator for generating a session identifier 
particular to a user initiated session and for use by a plurality of concurrently 
operating applications to uniquely identify said user initiated session; and 

a communication processor for, 
10 communicating said session identifier to said first application 

and 

communicating said session identifier to another application of 
said plurality of concurrently operating applications in response to a request to receive 
said generated session identifier. 
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8. A system according to claim 7, including 

an encryption key generator for substantially randomly generating an 
encryption key particular to said user initiated session, in response to said session 
initiation request. 

9. A system according to claim , wherein 

said encryption key is for common use by said plurality of 
concurrently operating applications in encrypting data associated with a personal 
record. 

10. A system according to claim 7, wherein 

said communication processor includes said generated session 
identifier in different types of command messages communicated to applications of 
said plurality of concurrently operating applications. 
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1 1. A system supporting concurrent operation of a plurality of Internet 
compatible applications, comprising: 

a browser application providing a user interface display permitting 
user entry of identification information and commands for a plurality of Internet 
5 compatible applications and for providing user identification information to a first 
application for validation; and 

a managing application for generating a session identifier particular to 
a user initiated session in response to receiving a session initiation request from a first 
application and for communicating said session identifier to said first application. 

10 

12. A system according to claim 11, wherein 

said managing application also communicates to said first application 
data items including one or more of, (a) a key to be used in encrypting and decrypting 
a session identifier conveyed in URL data, (b) an indicator identifying whether or not 
15 a session initiation request is successful. 



13. A system according to claim 11, wherein said managing 
application includes 

an encryption key generator for substantially randomly generating an 
20 encryption key particular to said user initiated session, in response to said session 
initiation request. 



14. A system according to claim 13, wherein 

said encryption key is for common use by said plurality of 
25 concurrently operating applications in encrypting data associated with a personal 
record. 



15. A system according to claim 11, wherein 

said managing application includes said generated session identifier in 
30 different types of command messages communicated to applications of said plurality 
of concurrently operating applications. 
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16. A method employed by a first application operating in a system 
supporting concurrent operation of a plurality of Internet compatible applications, 
said method comprising the steps of: 

authorizing user access to said first application in response to 
5 validation of user identification information; and 

communicating a session initiation request to a managing application 
to initiate generation of a session identifier particular to a user initiated session in 
response to validation of user identification information. 

10 17. A method employed by a managing application for supporting 

concurrent operation of a plurality of network compatible applications, comprising the 
steps of: 

receiving from a first application a session initiation request to initiate 
generation of a session identifier; 
15 generating a session identifier particular to a user initiated session and 

for use by a plurality of concurrently operating applications to uniquely identify said 
user initiated session; and 

communicating said session identifier to said first application and to 
another application of said plurality of concurrently operating applications in response 
20 to a request to receive said generated session identifier. 



